No-cloning theorem for a single POVM 
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Cloning of statistics of general quantum measurement is discussed. The presented approach is 
connected with the known concept of observable cloning, but differs in some essential respects. The 
reasons are illustrated within some variety of B92 protocol. As it is shown, there exist pairs of states 
such that the perfect cloning of given POVM is not possible. We discuss some properties of these 
intolerant sets. An example allowing the perfect cloning is presented as well. 
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I. INTRODUCTION 



In a quantum world, powerful tools for information processing can be found The principal idea is encoding 
f**«« ' information into quantum states. Due to quantum lability, a copying problem becomes very important. The main 
point in this regard is expressed by the no-cloning theorem [2| . The result was extended to the case of mixed states 0] ■ 
Surprisingly, in composite systems the no-cloning principle for orthogonal states holds Q. An approximate cloning 
of quantum states was firstly studied by Buzek and Hillery || . Various results and scenarios have been developed in 
O i' this trend @ • The problem of mixed-state cloning remains attractive H| . Quantum cloning is naturally connected 
! 1 „ [ with analysis of eavesdropping strategies and Bell's inequality 0, [l(|. In the context of quantum cryptography, 
the asymmetric cloning machines are interesting [ill Il2j . Quantum cloning can be used for joint measurement of 
noncommuting observables [l3j . In view of the stronger no-cloning theorem [lij , the cloning with a priori information 
'- J , in the ancilla have been studied [lfl [l6[ . 

The concept of observable cloning was proposed in Refs. [13, [HI]. In the present work, this concept is developed in 
several important respects. In particular, we address the question whether a statistics of quantum measurement can 
be utilized by legitimate users as additional source of secrecy. In principle, such statistical data might be adopted in 
the context of multi-user network, for instance, as a kind of "certificate" for access mechanism. That is, the statistics 
is known not only to users but to a trusted authority as well. So we ask a character of vulnerability of measurement 
statistics under evil activity. In view of Kcrckhoffs' principle, we consider a situation where the used POVM is known 
to an intruder. To provide a secrecy, more than one sets of quantum states should be applicable to encryption with the 
same technical equipment. We describe the corresponding example related to B92 protocol. Meantime, the presented 
results may be useful in more abstract sense and other contexts. 



II. DESCRIPTION OF THE PROBLEM 

As a part of the communication, given quantum channel can be used by legitimate users for various aims. In this 
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work we mean the following scenario. Physically, the sender (Alice) secretly chooses a state from the specified set B 
and sends this state to the receiver (Bob). Then Bob performs some quantum measurement M. generally described 
by "positive operator-valued measure" (see Fig. 1). Recall that POVM Ai — {M m } is a set of positive operators 
obeying M m = 1 [l|. The utilized quantum measurement is assumed to be known to both parties. Meanwhile, 
Alice may principally choose the set B without giving Bob a notice which is required for quantum key distribution 
too. The intruder (Trudy) entangles probe 'T' with quantum carrier 'A' and further acts with respect to own pursued 
interests. Of course, the actually send state is unknown for Trudy. We now describe an example where the knowledge 
of used POVM does not imply the knowledge of actual set B. 

In the B92 scheme [l||, Alice encodes bits and 1 into nonorthogonal states |ry+) ^ \f]-)- In its original version, 
Bob randomly measures one of two projectors |0+)(0+| and where \0i) _L \rji). From the viewpoint of imple- 

mentation, the measurement is realized by carrying out with probability 1/2 one of two PVMs {|t7+)(?7+|, 
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FIG. 1: Two input qudits are processed by Trudy via channel £ . Then she sends qudit 'A' to Bob. Finally, Bob and Trudy 
perform POVM measurement M, every on own qudit. 



and {\r]-)(r)-\, Formally, this is described by the four-element POVM 

AA:=|i| 77+ )( 77+ |,^ + )^ + | I i|7 ? _)('?-|,^-)^-l} ■ (2.1) 

Further, Bob combines outcomes 'ry±' into one inconclusive answer. More economical way uses the optimal POVM for 
unambiguous discrimination between \r)+) and \r]-) [20I ]. However, in this case only one prescribed pair of states can 
be utilized. On the other hand, Alice and Bob can take any two nonorthogonal states from the set {|f?±), \&±)} with 
the same equipment for realizing the POVM Af. The legitimate users can adopt four acceptable pairs for different 
seances of quantum key distribution. This is not possible with the optimal unambiguous discrimination. By numerical 
tests for two-state protocol, it was found that optimal intruder's probe needs only two dimensions (2lj . But such a 
conclusion is hardly valid when one involves all states from the set {|?7±), |$±)}- A discussion of this question would 
take us to far afield. We merely note that a potential resource may be dealt within the B92 scheme. 

By C we denote d-dimensional complex vector space, i.e. the state space of d- level system (qudit). After interaction 
the system 'AT' is in a state f2 = £(p <8> go), where Qq is the initial state of 'T assumed to be fixed. Ingeneral, 
the evolution of open quantum system is described by a completely positive trace-preserving linear map jlj called 
"quantum channel." The output density matrices are expressed as partial traces to a = try(fi) and lot = tr^fi) 
over the corresponding subspaces. In Bob's measurement on qudit 'A', j-th outcome occurs with the probability 
<7j := tr{(Mj ® l)rZ} = tr^Mj u>a)- If Trudy try to copy the original statistics then she perform the measurement M. 
on qudit 'T' with the probability of fc-th outcome equal to := tr{(l® Mfe)J7} = tr^(M / r c lot)- In the case considered, 
each of the two probability distributions {qj} and {rk} is actually marginal of the joint distribution {tjk} given by 
tjk := tr{(M, <E> Mj,)fi}. Both the probability distributions {qj} and {r^} should be compared with the original 
distribution {pi := tiA(Mip)} . In addition, Trudy would like to conceal her activity One of possible approach is to 
define the perfect standard by 

V tjk =pj , V . t jk = Pk ■ (2.2) 

We will say "broadcasting" of statistics, when results of copying process are assumed to be compared just with the 
standard (|2.2I) . This wording concur with the common notation emerged in Ref. If Trudy means a replication 
of POVM statistics as such, then broadcasting can be utilized. However, this way is rather insufficient when Trudy 
intends to use the obtained results in future action. For example, her data together with Bob's data may be exposed 
to a trusted authority in some stage. Here she have to consider a special form of broadcasting in which the perfect 
standard is expressed as tjk = PjPk for all j and k. That is, the factorization of joint distribution is wanted as well. 
This process will be called "cloning" of statistics. As is mentioned above, statistics cloning may have a practical sense. 
It is also interesting from the viewpoint of fundamental limitations on manipulation with quantum information. 

After choice of the standard for comparison, we should adopt good figure of merit. In the context of statistics cloning, 
the actual joint distribution {tjk} is compared with the perfect standard {pjPk}. The notion of relative entropy is very 
useful in many respects Recall that the relative entropy of {pj} to {qj} is defined by H(j>j\\qj) := ^2jPj ^ n {Pj/qj)- 
If given POVM {M m } has been cloned perfectly then H{tjk\\pjPk) — 0- Otherwise, a cloning process is approximate. 
Let B = {pft} be a set of density operators on C d . Then a merit of cloning can naturally be evaluated by the measure 
H B := sup{H(tjk\\pjPk) ■ P^B}. 

To each observable we can assign " projector- valued measure" (PVM). In this sense, the concept of observable 
cloning is involved into the above reasons. On the other hand, the authors of Ref. [17| expressed cloning of an 
observable in terms of its mean value. Another point is that they focused key attention on the incompatibility of 
observables. At the same time, a structure of input quantum states can be crucial for use of cloning in eavesdropping 
process Q. Indeed, a small number of states are typically used in the protocols of quantum cryptography. Further, 
our reasons are expressed purely in terms of probability distributions. Note that there are other ways to evaluate a 
merit of POVM cloning. For examle, we would adopt the trace distance which has clear operational meaning. In 
general, a good choice for figure of merit may be specified by the actual context. 
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III. NO-CLONING OF A SINGLE POVM 



In this section the main result will be presented. For any operator X on C d , the operator X^X is positive. The 
operator |X| is defined as a unique positive square root of X^X. The eigenvalues of |X| counted with their multiplicities 
are singular values Sj (X) of operator X [22| . The fidelity between two density operators p and lj is defined by [l], [23| 



F {p,u) = ^2 =i Sj(VpVw) = tr|VP\/^l ■ (3.1) 



Note that Jozsa 24j used the word "fidelity" for the square of the right-hand side of (|3.ip . This may be more 
convenient sometimes [l6l. l25l. [26j . However, we will further use the definition (|3.1|) . The fidelity function enjoys many 
useful properties including quantum-classical relation [27| ■ The classical fidelity between probability distributions 
{pj} and {qj} is given by 

HpjiQj) ■= y^.VmJ ■ (3-2) 

The authors of Ref. [13] showed that the fidelity satisfies 

F(p,w) =mmj r (p m ,q m ) , (3.3) 

where p m = tr^(M m( o), q m = tij\(M m uj) and the minimization is over all POVMs. The concept of purification is also 
needed. Adding another qudit 'B', we re-express mixed states p and lo of qudit 'A' as partial traces p = trs(| 1 S , )(W|) 
and u> = trB(|$)($|). Here pure states IvP) and |$) of total system 'AB' are purifications of p and ui. Then we have 



24] 

F(p,w)=max|<*|$)| , (3.4) 

where the maximum is taken over all purifications of p and |<I>) of lo. 

Theorem 1. A POVM {M m } cannot be cloned with = over each pair {p, lo} of states such that 

F{p m ,q m f < F(J>,U) . (3.5) 

Proof. Suppose that POVM {M m } has been cloned perfectly over two different inputs p' and p". Then associated 
probabilities are t'j k — p'jPk an d i" fc = p'jp'l- For the outputs ft' = £(p' ® go) and fl" = £(p" ® go), the measurement 
{Mj <S) Mfe} gives classical fidelity 

nt' jk ,t%) = Y. 3k W k m) l/2 = E/^") 1/2 E fe («) 1/2 = ^ v p';? ■ (3.6) 

Due to the statistical interpretation Q3.3p , we have F(£l',£l") < F(p'pp") 2 . On the other hand, the fidelity cannot 
decrease under trace-preserving quantum operation [l[ , that is 

F(p', p") = F{p' ® g , p" ® g ) < F(Sl', n") , (3.7) 

where the multiplicativity is used. Together the last two relations imply that 

f(p',p")<-f( p ;-,p;') 2 ■ (3.8) 



This inequality is the negation of precondition Q3.5p . H 

Thus, the inequality Q3.8P is necessary condition for perfect cloning of POVM over two input quantum carriers. The 
statement of Theorem 1 gains novel view on cloning of measurement statistics. Let us return to the above example 
with B92 protocol. Writing 

|r?±) = cos?7|0) ± sinr?|l) , \6±) = - sinr;|0) ± cos?7|l) , (3.9) 

where 77 £ (0;n/2), we found the following probability distributions: {l/2, 0, cos 2 2rj /2, sin 2 2ri /2} for and 
{cos 2 277/2, sin 2 2rj /2, 1/2, 0} for |?/-). The classical fidelity between them is equal to cos2r/ = (?7+|ry_). Since 
J = f ^ 0,1, the condition (|3.5p is provided. By symmetry argument, the same conclusion holds for all the four 
pairs of nonorthogonal states from the set {|?7±), |#±)}- In each case, Tudy is unable to reach — over the pair. 
When quantum key distribution is not assumed, Alice can change the used pair independently of Bob. If both the 
Bob's and Trudy's data are exposed to a trusted authority then an intrusion will be detected with high probability. 
Certainly, an incompatibility property is basic in quantum theory. But another key aspect is dictated by a set of 
states into which we encode information. 
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IV. SOME PROPERTIES OF INTOLERANT SETS 

There are two clear cases, F(p,u) = and F(p,uj) = 1, for which the condition (|3.5[) cannot be valid independently 
of POVM to be cloned. So we will mean that < F(p, lu) < 1. In such a case, if we have the equality 

J r (p m ,q m ) = F(p,u;) , (4.1) 

then perfect cloning of given POVM over pair {p, lu} is not possible. It is known that this equality takes place if and 
only if [H] 

z m MU 2 p 1/2 = MVV/ 2 (4.2) 

for all m and some set {z m } of complex numbers. For any two density operator, a minimized POVM can always be 
constructed [l[|27j. On the other hand, for the given POVM we can select those pairs of density operators that satisfy 
(14. ip . Here the transitivity takes place, since if the pairs {p, lu} and {lu, q] obey the condition of the form (|4.ip then 
the pair {p, g} satisfies such a condition as well. Indeed, we have the equalities (|4.2[) and £ m Mm w 1 / 2 — Mm f? 1 / 2 , 
whence £ m z m MU' So we obtain some equivalence class of density operators. It turns out that this 

class is uncountably infinite. In the case of PVM {P m }, we have p m — (ip\P m \tp) and q m = (0|P m |0). The following 
lemma is proven in Appendix A. 

Lemma 2. Let PVM {P m } be given. For each € C d and any f £ [min-jjjm} 1 / 2 ; l] there exists pure state \<f>) 
such that the equality holds and |(V'| < / , )I = f ■ 

Parameter / is continuously varied in the interval from min-f^m} 1 / 2 to 1. So we obtain uncountably infinite set of 
pure states with the desired properties for any prescribed \ip). Using the concept of purifications, this result can be 
extended to mixed states. 

Theorem 3. Let POVM {M m } be given. For each density operator p on C d and any f £ [min-jjVj} 1 / 2 ; l] there 
exists density operator lu such that th e eq uality J^. j[ ) holds and F{p,u) = f. 

Proof. Due to Naimark's theorem j22[, POVM {M m } can be realized as a projective measurement on a pair 'AB' 
of qudits. Namely, we build PVM {n m } on the space C d ®C d and some pure state |0) € C d such that for each density 
operator p on C d and any m, 

tr A {M mP ) = tr AB (n m (p® ]0><0|)) . (4.3) 

The set {n m (g) 1(g) 1} is a PVM on the space (C d ) of four qudits 'A', 'B', 'C, and 'D'. Let us fix some purification 
I*) of mixed state p® |0)(0|. To the chosen state 1^) assign a pure state |$) such that 

K*|$}|=.F(Pm,g m ), (4.4) 

where p m — (^rim ® 1 ® 5m = ($|n m ® 1 ® This possibility is ensured by Lemma 2. We now define 

mixed state lu as partial trace lu = tr bcd(\®)(®\)- It follows from Eq. (|4.3I) that p m = tr^(M m p) = p m and 
§m = tr J 4(M m o;) = q m for prescribed p and built lu. So, the classical fidelity F(p rn ,q m ) satisfies 

F( Pm ,q m ) = \(^m<F(p,Lu) (4.5) 

due to Eqs. (|3.4p and (|4.4|) . Simultaneously, we have F(p m ,q m ) > F(p,Lu) by the statistical interpretation (|3. 31) . 
Hence, the equality F{p m ,q m ) = F(p,Lu) is provided. According to the statement of Lemma 4, the fidelity F(p,uj) 
can be varied between values minjpm} 1 / 2 and 1 by change of vector |$) and built state lu. ■ 

Thus, we collect density operators into equivalence class according to the condition (|4.1I) . Each class can further be 
decomposed with respect to the value / of quantum fidelity between two states. If quantum channel £ is unistochastic 
then the general scheme of arguments may be extended using the notion of partial fidelities. Uhlmann [28( introduced 
fc-th partial fidelity between density operators p and lu by Fk(p,ou) := J2j>k s j(\/pV^)i where singular values should 
be put in the decreasing order. Associated fc-th classical fidelity can also be defined [2{|. It turned out that all the 
partial fidelities cannot increase under any unistochastic quantum operation (29j . Using unistochastic channel, the 
given POVM cannot be cloned with H& = over each pair {p,lu} of states such that J-"fc(p m ,q m ) 2 < Fk(p 7 Lu). We 
refrein from presenting the explicit calculations. 

V. EXAMPLE OF PERFECT CLONING 

In this section, we give an explicit example of perfect cloning over pair of states. Consider the simplest case when 
d = 2, the measurement is projective and the qubits 'A' and 'T' interact unitarily. For brevity, we will write \rf) and 
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\9) instead of I77+) and \6+) respectively. We also define states \(p) :— sin?7|0) + e lv cosry|f). The PVM measurement 
{|0)(0|, |l)(f |} on the state \rj) generates probability distribution {cos 2 77, sin 2 77} ; on the state \ip) the one generates 
distribution {sin 2 77, cos 2 77} independent of (p. So, the classical fidelity between these two distributions is T = sin 27/. 
In general, the two distributions differ and T < 1. We shall now describe a procedure for perfect cloning of the PVM 
over pair \rj) and \<p). The overlap between these states is equal to 

(rj\(p) = cos 77 sin 77(1 + e i<p ) = e lip/2 sin 2rycos(^/2) . (5.1) 

The perfect cloning is possible when |(?7|v)| < J 72 , and hence | cos(ip/2)\ < sin 277. Further, we assume that {r]\ip) 7^ 
0, 1. Indeed, orthogonal (and identical) states can be perfectly cloned, so this case does not add anything new into 
discussion. Initially, Trudy prepares her qibit 'T' in the state \ri). Then she performs a unitary transformation on 
C 2 ® C 2 specified by 

u \ V ) ® \ v ) = \ v ) u \<p) ® \ v ) = W) ® W) ■ (5.2) 

By the unitary property, we have the constraint (rj\(p) = (ri\ip')(r]\ip"}, whence immediately exp(itp/2)cos(ip/2) = 
exp\i((p' + ip")/2~\ sin 277 cos(<^'/2) cos(</?"/2). The ideal case ip' = ip and tp" = ip is forbidden by the no-cloning 
theorem for quantum states. But this is not necessary for exact replication of the statistics. For arbitrary values of ip' 
and ip" , the needed distribution {sin 2 77, cos 2 77} is provided at the output on both the qubits 'A' and 'T'. The choice 
ip' = ip" leads to tp = 2tp' and 2cos(<y9/2) = sin 277(1 + cos <p'), whence cos(<£>/2) = cos 99' = sin 2r)/ (2 — sin 277). For given 
77, we calculate values of ip' and tp. [For those values of ip that violate the last condition, the scheme with ip' 7^ ip" 
works.] Note that the requirement |(»7|<£>)| < J~ 2 is herewith provided. The states (77) and \9) form an orthonormal 
basis in C 2 . In this basis, we write \<p) = a\r))+/3\9) and \ip') = a'\rj)+f3'\9). Using Eqs. (|5.2I) . we find a representation 
of transformation U as 4 x 4-matrix with respect to the basis {\rjrj), \i]9), \9rj), \99}}. For example, we can take 

/I \ 

auu*|u| _1 u a\u\ 2 | 

u -a- 1 ' [b - 6 > 
\ —a\u\ v avu* / 

where u = a'/3'/3 _1 , v = ft' ft f3~ x and a 2 = (\u\ 2 + | tj | 2 ) 1 . The made calculations are outlined in Appendix B. It can 
be checked that the four column vectors of this matrix are mutually orthogonal and unit. Note that only first and 
third columns are strictly kept by the requirement (|5.2[) . Second and fourth columns are varied under the unitary 
property. 

We have described the example of perfect cloning of single PVM. This example is non-trivial, because (r/\ip) 7^ 0, 1 
and the original probability distributions {cos 2 77, sin 2 77} and {sin 2 77, cos 2 77} are different. For each of the two states 
\rf) and \ip) at the input, the measurement on both the qubits 'A' and 'T' at the output gives the factorized distribution 
{tjk} = {PjPk}- So we have the relative entropy H(tjk\\pjPk) = for both the potential inputs. The perfect cloning 
became possible due to the validity of |(»7|y)| < J~ 2 ■ That is, the pair {|?7), \ip)} was chosen to be tolerant to cloning 
ofPVM{|0)(0|,|l)(l|}. 

VI. CONCLUSIONS 

We have examined the notion of POVM cloning as a special strong form of broadcasting. As figure of merit, the 
relative entropy of the actual joint distribution to the factorized distribution was proposed. In parallel with the 
incompatibility, a character of potential input states can prevent the exact replication of statistics at the output. So 
we approached a problem from a somewhat different point of view than the previous studies of observable cloning. 
The no-cloning theorem for a single POVM measurement has been established. The presented reasons have been 
illustrated on the example related to B92 protocol. We have also investigated some properties of those sets that are 
intolerant to perfect cloning of given POVM. The simple example of perfect cloning has been described explicitly. 
This example shows that the cloning with factorized distribution at the output may be real too. 
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Appendix A: Proof of Lemma 2 



Let us suppose that P m = Xm=i \ e mn)(e m n\, where N(m) denotes rank of projector P m and a basis {|e mn )} is 
orthonormal. The vectors and \4>) are expressed as 

} J c mn \e mn ) , \4>) = } y b mn \e mn ) . (Al) 

m * — 'n— 1 * — 'm * — 'n— 1 

Multiplying each |e m ) by phase factor properly, we can always make all the coefficients c mn to be positive reals. We 
also restrict attention to superposition (|A1|) with positive real coefficients b mn . Then the fidelity between states is 



7 



expressed as \(tp\<p)\ = J2 mn c mnb mn - By p m = J2„ c mn and q m = Y. n b m,m the classical fidelity is rewritten as 

y N(m) „ \ 1/2 /„Af(m) \ 1 / 2 



The equality 1(^10)1 — J'iPm^Qm) takes place if and only if 



x — ^ 1 



N(m) /v-^JV("0 9 \ fsr^N(m) 



L — '71= 1 V* — 'n=l / V* — 'n=l 

for all m. At fixed to, the iV-tuples (c m i, . . . , c m j\r) and (6 m ij • • • j bmjsf) of real numbers can be viewed as N— 
dimensional vectors of real space R N . According to the Cauchy-Schwarz inequality, the equality (|A3[) is valid if and 
only if these two vectors are linearly related. In other words, for all n and fixed to we have b mn = j m c mn with some 
positive 7, n . Of course, numbers j m are varied under the condition (<p\(f>) = 1. The maximum (ip\4>) = 1 is reached 
when b mn = c mn for all to and n. We can also write 

f(Pm, Qm) > min{p m } 1/2 V" Jq~^ > min{p m } 1/2 V" q m = min{p m } 1/2 . (A4) 

* — 'm * — *m 

This lower bound can always be reached. Let Too be value such that p mo = min{p m }. We take b mon = p mo ' c mo „ 
and b mn — for m 7^ too, whence q mQ — 1 and q m = for to 7^ mo. Here the equality (IA3|) still holds and 
J~(p m ,q m ) — Pmo - As continuous function of 6 mn , the quantity |(V>|</>)| ranges between min {Pm} 1 ' 2 and 1. ■ 



V2 /_ m , \ 1/2 



4 >. , b mn . (A3) 



Appendix B: Calculation of matrix elements 

Let us represent basis vectors |0) and |1) as combinations of \rj) and \9). Solving the needed equations, we get 
|0) = cos7?|7j) — sin r)\6), |1) = sin r]\rj) + cosjyl^). Substituting these terms, we get \ip) — a\rf) + (3\9) with values 
a = (l + e lip ) sin 7/ cos 77 = e % ^l 2 cos{ip/2) sui2to (3 — — sin 2 77 + e lip cos 2 77. Replacing ip with ip', we obtain a' and /3' in 
formula \(p') — a'\rj) + j3'\9). Note that a = (a 1 ) 2 by the choice of ip and ip' . The specification (15.21) is recast as the 
two conditions U |rm) = \r)rj) and /3 U 1 6*77) = a' j3'\r)ff) + f3'a'\9rj) + (3'f3'\99). Multiplying the first condition by each of 
four vectors \r)r]), \r]9), \9ri), \99), we obtain the first column (1,0, 0,0) T of the matrix (I5.3[) . In the same manner, the 
third column (0, u, u, v) T of (|5.3[) is derived from the second condition. Adding columns (0, 0, 1, 0) T and (0, 0, 0, 1) T , 
we apply the Gram-Schmidt orthonormalization process which results in the matrix (15.3[) . 



